<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 02/23/2017 08:28 AM, Andreas Krüger
wrote:<br>
</div>
<blockquote
cite="mid:CANoYimC7R=rcEA_yU6W7UuOPhTS+SpCHcjHkye07HvM6Ge+sjQ@mail.gmail.com"
type="cite">
<div dir="ltr">
Hi,<br>
<br>
I was wondering with the following setup, if you would use
Symmetric NAT.<br>
<font face="garamond, serif"><br>
</font>
<div><font face="garamond, serif">
+--------------+
</font></div>
<div><font face="garamond, serif">+--------------+ |
89.192.76.11 | +--------------+</font></div>
<div><font face="garamond, serif">| Client 1 | LAN |
Router | Internet | 72.87.123.32 |</font></div>
<div><font face="garamond, serif">| 172.32.11.17 + --------->
| 172.32.11.1 + --------------> | Asterisk |</font></div>
<div><font face="garamond, serif">+--------------+
+--------------+ +--------------+</font></div>
<div><br>
<br>
I'm using PJSIP, and have set
the external_media_address, external_signaling_address
and local_net for the transport.<br>
<br>
The client is connecting with WSS and also using ICE.<br>
<br>
</div>
<div>force_rport is set to yes in ps_endpoints section for the
client. Also direct_media is no.<br>
<br>
Regards,<br>
<br>
Andreas Krüger</div>
</div>
</blockquote>
<br>
I think that all depends on ICE is configured. If the client is not
connecting to a STUN server, then ICE will only advertise the
client's host candidate(s). Since Asterisk cannot reach the client
directly, you would want to enable symmetric RTP so that Asterisk
directs its media to the router instead.<br>
<br>
If the client is using a STUN server, it should advertise the
router's public IP address as a server reflexive candidate. The ICE
connectivity checks should result in Asterisk sending to that
address. Therefore you would not need to enable symmetric RTP in
that case.<br>
</body>
</html>